Use the correct rights.

ImageMagick · Sep 11, 2021 · 428e685 · 428e685
1 parent 10c0f5b
commit 428e685
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/magick/module.c b/magick/module.c
@@ -1283,7 +1283,7 @@ MagickExport MagickBooleanType OpenModule(const char *module,
   p=GetCoderInfo(module,exception);
   if (p != (CoderInfo *) NULL)
     (void) CopyMagickString(module_name,p->name,MaxTextExtent);
-  rights=AllPolicyRights;
+  rights=ReadPolicyRights|WritePolicyRights;
   if (IsRightsAuthorized(ModulePolicyDomain,rights,module_name) == MagickFalse)
     {
       errno=EPERM;

diff --git a/magick/static.c b/magick/static.c
@@ -398,7 +398,7 @@ MagickExport MagickBooleanType RegisterStaticModule(const char *module,
   p=GetCoderInfo(module,exception);
   if (p != (CoderInfo *) NULL)
     (void) CopyMagickString(module_name,p->name,MagickPathExtent);
-  rights=AllPolicyRights;
+  rights=ReadPolicyRights|WritePolicyRights;
   if (IsRightsAuthorized(ModulePolicyDomain,rights,module_name) == MagickFalse)
     {
       errno=EPERM;
@@ -441,18 +441,22 @@ MagickExport MagickBooleanType RegisterStaticModule(const char *module,
 */
 MagickExport void RegisterStaticModules(void)
 {
+  PolicyRights
+    rights;
+
   size_t
     extent;
 
   ssize_t
     i;
 
+  rights=ReadPolicyRights|WritePolicyRights;
   extent=sizeof(MagickModules)/sizeof(MagickModules[0]);
   for (i=0; i < (ssize_t) extent; i++)
   {
     if (MagickModules[i].registered == MagickFalse)
       {
-        if (IsRightsAuthorized(ModulePolicyDomain,AllPolicyRights,
+        if (IsRightsAuthorized(ModulePolicyDomain,rights,
               MagickModules[i].module) == MagickFalse)
           continue;
         (void) (MagickModules[i].register_module)();